Static task
static1
Behavioral task
behavioral1
Sample
6ea2a3580297d5baac694c6b167fe17c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6ea2a3580297d5baac694c6b167fe17c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
6ea2a3580297d5baac694c6b167fe17c_JaffaCakes118
-
Size
429KB
-
MD5
6ea2a3580297d5baac694c6b167fe17c
-
SHA1
4f16288074898bd188a8275420946ad6e62c0923
-
SHA256
bc6921cc9bc96da8ac65b571ac9af1d33a3f32e259ed141f6b77a999150d9197
-
SHA512
1b3609ba342e02306e9b26ed99ea19b115b7da0ac4964ec200fabffe32c8a7c57cf41746f2203442ad2a692f5f9b92d78925f2851a0f8ffec2590dd9aacd3c60
-
SSDEEP
12288:5rOyuP22qsC56K/lGRgOUqmq9kR6lhKXTqySfAow/srAX:VOyY7k6K/cRgOnmq9g6eqySfli
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6ea2a3580297d5baac694c6b167fe17c_JaffaCakes118
Files
-
6ea2a3580297d5baac694c6b167fe17c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 54KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 286KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE